BadArgument
SimpleParseStringFlags
chunk_error
vIsModuleLoaded
Static task
static1
Behavioral task
behavioral1
Sample
138f9305783cdc145fca141175896610_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
138f9305783cdc145fca141175896610_JaffaCakes118.dll
Resource
win10v2004-20240802-en
Target
138f9305783cdc145fca141175896610_JaffaCakes118
Size
492KB
MD5
138f9305783cdc145fca141175896610
SHA1
3e1b1c77d24c4c58aef87c9e358d69de59a0de5c
SHA256
4e86073c77a8d12765a3c715277b3fcfb7a364a22e6c755556a46c4ecf8eb6e8
SHA512
16c8864f0aa4387caa5ee332af46d6423e9ec329a81fcade18f946378b0a97ae554bc7020c2f4c4a70906ddc788b74a117efcd4a6cfb406d69394bce11e089d8
SSDEEP
12288:2hwpOnjVOuzjP2vAQB5RCCglFgqRy1x/4:2hwpOnjIBI7C88x/
Checks for missing Authenticode signature.
resource |
---|
138f9305783cdc145fca141175896610_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
SetClassWord
RegisterWindowMessageA
InterlockedDecrement
lstrcpyA
WriteFile
DisableThreadLibraryCalls
EnterCriticalSection
FreeEnvironmentStringsA
GetACP
GetCommandLineA
GetEnvironmentVariableA
GetLastError
GetModuleHandleA
GetProcAddress
GetProcessPriorityBoost
GetStartupInfoA
GetStringTypeA
GetTickCount
GetVersion
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
InitializeCriticalSection
WideCharToMultiByte
InterlockedIncrement
LCMapStringA
LCMapStringW
LeaveCriticalSection
MultiByteToWideChar
RtlUnwind
SetHandleCount
SetLastError
TerminateProcess
VirtualAlloc
VirtualFree
MiniDumpReadDumpStream
SearchTreeForFile
SymEnumTypes
SymInitialize
FindExecutableImageEx
BadArgument
SimpleParseStringFlags
chunk_error
vIsModuleLoaded
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ